CVE-2006-2194: High severity Point-to-point Protocol Project Point-to-point Protocol vulnerability
The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, which might allow local users to gain privileges by causing setuid to fail, such as exceeding PAM limits for the maximum number of user processes, which prevents the winbind NTLM authentication helper from dropping privileges.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2194?
CVE-2006-2194 is considered a high severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2006-2194?
To fix CVE-2006-2194, upgrade Point-to-Point Protocol (PPP) to version 2.4.5 or later, which addresses the vulnerability.
Who is affected by CVE-2006-2194?
CVE-2006-2194 affects users of PPP versions 2.4.4 and earlier, especially those utilizing the winbind plugin.
What type of attacks can exploit CVE-2006-2194?
CVE-2006-2194 can be exploited by local users to gain elevated privileges on affected systems.
Is CVE-2006-2194 still a concern today?
While CVE-2006-2194 is an older vulnerability, systems running outdated versions of PPP remain at risk and should be updated.